NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxp://194[.]102[.]105[.]70/8jdjZhdf7/Plugins/cred[.]dll
● IOC
hxxp://194[.]102[.]105[.]70/8jdjZhdf7/Plugins/cred[.]dll
View graph
Watch
Export
Type
URL
Source
URLhaus
First seen
Sep 11, 2026
Last seen
—
offline
malware download
reported by
Bitsight
Look up on VirusTotal
Linked malware
dropped-by-amadey
Amadey
0d20ad
plugin
cred.dll
Related Indicators
6
url
hxxp://91[.]92[.]242[.]236/files-129312398/files/file_f50d0ed2eef01870[.]exe
same malware family
url
hxxp://91[.]92[.]242[.]236/files-129312398/files/file_8f2a9c058325ac38[.]exe
same malware family
url
hxxp://91[.]92[.]242[.]236/files-129312398/files/file_59d28a25d618df87[.]exe
same malware family
url
hxxp://91[.]92[.]242[.]236/files-129312398/files/file_2f5216405eb2fec9[.]exe
same malware family
url
hxxp://91[.]92[.]242[.]236/files-129312398/files/file_7cba58e6cdbbfa7e[.]exe
same malware family
url
hxxp://91[.]92[.]242[.]236/files-129312398/files/file_583f8856851a870c[.]exe
same malware family
Connections
5 relationships
Indicates
5
dropped-by-amadey
source
Amadey
source
0d20ad
source
plugin
source
cred.dll
source